Skip to content

Commit caf44a5

Browse files
author
Nicolas Oman
committed
updated link, de-numbered list
1 parent 37c8d1f commit caf44a5

File tree

1 file changed

+5
-5
lines changed

1 file changed

+5
-5
lines changed

articles/service-fabric/service-fabric-windows-cluster-x509-security.md

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -247,17 +247,17 @@ For clusters that are running production workloads, use a [certificate authority
247247

248248
There are a number of properties that the certificate must have in order to function properly:
249249

250-
1. The certificate's provider must be **Microsoft Enhanced RSA and AES Cryptographic Provider**
250+
* The certificate's provider must be **Microsoft Enhanced RSA and AES Cryptographic Provider**
251251

252-
2. When creating an RSA key, make sure the key is **2048 bits**.
252+
* When creating an RSA key, make sure the key is **2048 bits**.
253253

254-
3. The Key Usage extension has a value of **Digital Signature, Key Encipherment (a0)**
254+
* The Key Usage extension has a value of **Digital Signature, Key Encipherment (a0)**
255255

256-
4. The Enhanced Key Usage extension has values of **Server Authentication** (OID: 1.3.6.1.5.5.7.3.1) and **Client Authentication** (OID: 1.3.6.1.5.5.7.3.2)
256+
* The Enhanced Key Usage extension has values of **Server Authentication** (OID: 1.3.6.1.5.5.7.3.1) and **Client Authentication** (OID: 1.3.6.1.5.5.7.3.2)
257257

258258
For clusters that you use for test purposes, you can choose to use a self-signed certificate.
259259

260-
For additional questions, consult [frequently asked certificate questions](https://docs.microsoft.com/en-us/azure/service-fabric/cluster-security-certificate-management#troubleshooting-and-frequently-asked-questions).
260+
For additional questions, consult [frequently asked certificate questions](https://docs.microsoft.com/azure/service-fabric/cluster-security-certificate-management#troubleshooting-and-frequently-asked-questions).
261261

262262
## Optional: Create a self-signed certificate
263263
One way to create a self-signed certificate that can be secured correctly is to use the CertSetup.ps1 script in the Service Fabric SDK folder in the directory C:\Program Files\Microsoft SDKs\Service Fabric\ClusterSetup\Secure. Edit this file to change the default name of the certificate. (Look for the value CN=ServiceFabricDevClusterCert.) Run this script as `.\CertSetup.ps1 -Install`.

0 commit comments

Comments
 (0)